security advisorydenial of servicedebian
Bastian Blank reported a denial of service vulnerability in Email::Address, a Perl module for RFC 2822 address parsing and creation. Email::Address::parse used significant time on parsing empty quoted strings. A remote attacker able to supply specifically crafted input to . - ------------------------------------------------------------------------- Debian Security Advisory DSA-2969-1 This email address is being protected from spambots. You need JavaScript enabled to view it. http://www.debian.org/security/ Salvatore Bonaccorso June 27, 2014 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : libemail-address-perl CVE ID : CVE-2014-0477 Bastian Blank reported a denial of service vulnerability in Email::Address, a Perl module for RFC 2822 address parsing and creation. Email::Address::parse used significant time on parsing empty quoted strings. A remote attacker able to supply specifically crafted input to an application using Email::Address for parsing, could use this flaw to mount a denial of service attack against the application. For the stable distribution (wheezy), this problem has been fixed in version 1.895-1+deb7u1. For the testing distribution (jessie), this problem has been fixed in version 1.905-1. For the unstable distribution (sid), this problem has been fixed in version 1.905-1. We recommend that you upgrade your libemail-address-perl packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: http://www.debian.org/security/ Mailing list: This email address is being protected from spambots. You need JavaScript enabled to view it. . Debian Security Advisory DSA-2969-2 addresses a vulnerability in the libxml-parser-perl package, necessitating an urgent update.. Debian Security Advisory, Denial Of Service, LibEmailAddress, Perl Module. . Severity: Critical. LinuxSecurity.com Team
Jun 27, 2014
•Critical
Debian